Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-2389

Опубликовано: 30 авг. 2019
Источник: nvd
CVSS3: 5.3
CVSS3: 4.2
CVSS2: 1.9
EPSS Низкий

Описание

Incorrect scoping of kill operations in MongoDB Server's packaged SysV init scripts allow users with write access to the PID file to insert arbitrary PIDs to be killed when the root user stops the MongoDB process via SysV init. This issue affects MongoDB Server v4.0 versions prior to 4.0.11; MongoDB Server v3.6 versions prior to 3.6.14; MongoDB Server v3.4 versions prior to 3.4.22.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*
Версия от 3.4.0 (включая) до 3.4.22 (исключая)
cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*
Версия от 3.6.0 (включая) до 3.6.14 (исключая)
cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*
Версия от 4.0.0 (включая) до 4.0.11 (исключая)

EPSS

Процентиль: 31%
0.0012
Низкий

5.3 Medium

CVSS3

4.2 Medium

CVSS3

1.9 Low

CVSS2

Дефекты

CWE-732
CWE-20

Связанные уязвимости

ubuntu логотип

CVE-2019-2389

CVSS3: 5.3
ubuntu
больше 6 лет назад

Incorrect scoping of kill operations in MongoDB Server's packaged SysV init scripts allow users with write access to the PID file to insert arbitrary PIDs to be killed when the root user stops the MongoDB process via SysV init. This issue affects MongoDB Server v4.0 versions prior to 4.0.11; MongoDB Server v3.6 versions prior to 3.6.14; MongoDB Server v3.4 versions prior to 3.4.22.

redhat логотип

CVE-2019-2389

CVSS3: 4.2
redhat
больше 6 лет назад

Incorrect scoping of kill operations in MongoDB Server's packaged SysV init scripts allow users with write access to the PID file to insert arbitrary PIDs to be killed when the root user stops the MongoDB process via SysV init. This issue affects MongoDB Server v4.0 versions prior to 4.0.11; MongoDB Server v3.6 versions prior to 3.6.14; MongoDB Server v3.4 versions prior to 3.4.22.

debian логотип

CVE-2019-2389

CVSS3: 5.3
debian
больше 6 лет назад

Incorrect scoping of kill operations in MongoDB Server's packaged SysV ...

github логотип

GHSA-vjcf-4g29-6hfr

CVSS3: 4.2
github
больше 3 лет назад

Incorrect scoping of kill operations in MongoDB Server's packaged SysV init scripts allow users with write access to the PID file to insert arbitrary PIDs to be killed when the root user stops the MongoDB process via SysV init. This issue affects: MongoDB Inc. MongoDB Server v4.0 versions prior to 4.0.11; v3.6 versions prior to 3.6.14; v3.4 versions prior to 3.4.22.

EPSS

Процентиль: 31%
0.0012
Низкий

5.3 Medium

CVSS3

4.2 Medium

CVSS3

1.9 Low

CVSS2

Дефекты

CWE-732
CWE-20